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UNITED STATES INTELLIGENCE BOARD 
SECURITY COMMITTEE 


SECOM-D- 112 
17 September 1975 


MEMORANDUM FOR: 


Chairman, United States Intelligence Board 


SUBJECT 


Community- Wide, Computer -Assisted 
Compartmentation Control System (4Cs) 


REFERENCE 


(A) USIB-M-669, 30 May 1974, Item 5 

(B) USIB-D-9. 5/16, 30 October 1974 


25X1 

25X1 


25X1 

25X1 

25X1 


1. Attached is the report of the Security Committee's 
working group on the follow-on study which the Board agreed to 
support after the Security Committee recommended rejection of 
the CLAIRE concept. 


2. Toward a goal of inducing economy and efficiency 
in the community's management of compartmented clearances 
the representatives of CIA, DIA, Army, Navy, Air Force, State, 
ERDA and NS A developed and costed a design to meet their 
requirements in this area. The configuration of this system calls 
for a central facility in the form of a secure dedicated minicomputer 
in one agency connected to remote terminals in other agencies. 


3 ; The design permits registration of approxim ately 
individuals, each of whom can be credited with ' ' 


clearances. The design is open-ended and more storage capacity 
can be added. The design provides for expansion capabilities 
but is limited initially to use in the Washington area. The design 
also provides for a suppression capability to limit access to 
certain personnel and/or clearances to the inputting department 
if this feature is desired. 


4. The central facility would cost approximately 
and requ ire mon thly personnel costs of 


costs of 


land maintenance 


Departments and agencies perceive the need for 
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terminals of different configurations to satisfy unique requirements. 
The projected costs of these terminals are: 

- g enc y Equipments Monthly Maintenance 

DLA 

Army 

Air Force 

Navy 

CIA 

NSA 

State 

ERDA 


5. Ihe participating members endorsethis concept and the 
FBI and Treasury Department, while not represented on the working 
group due to small need for such a facility, also endorse the proposal 

6. Recommendations 

Ihe Security Committee believes that this computer -as sis ted 
compartmentation clearance control procedure is feasible and cost- 
effective, and recommends: 

(a) That USIB endorse the concept and authorize 
its implementation. 

(b) That the Office of Joint Computer Services, CIA, 
v-;V - y- be designated as executive agent, for implementation .and =- 

operation as a service of common concern 

(c) That the CIA fund purchase and maintenance of 
the central facility to be located in CIA. 
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(d) That the departments and agencies fund the costs 
of selection, purchase and installation of terminals configured 
to meet their perceived needs. 


25X1 

Chairman 

Attachment 
4Cs Report 


NOTED: 


25X1 



NOTED: 


1 8 SEP 1975 


Samuel V. Wilson 
' 'Eiehtdnarit General', '"USA 
D/DCI/IC 


Date 


< ■ \ M 
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SECURITY COMMITTEE 
WORKING GROUP REPORT 


Requirements for a 
Community- Wide, Computer -As sisted 
Compartmentation Control System 
(July 1975) 


Security Committee Task XI-I 


Attachment: 

Supporting Facts and Observations 
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Report of the Working Group of the USIB Security Committee 
on Requirements for a Community-Wide, Computer -Assisted 
Compartmentation Control System 


1. Introduction 

This report was prepared by a Working Group of the Security 
Committee of USIB with representation from CIA, Chairman, DIA, 
Army, Navy, Air Force, NSA, State and ERDA. The FBI and 
Treasury declined participation although they expressed interest 
in the study. 

The report satisfies requirement of a task by the Security 
Committee in November 1974 to conduct a study of the intelligence 
community's requirements and devise a concept for a viable cost- 
effective procedure to assist in control of compartmented accesses. 

The Working Group first assembled requirements of the 
community members and then submitted a statement of needs to 
system design personnel in CIA and DIA for independent feasibility 
and cost studies. The Working Group examined DIA and CIA 
proposals and selected a DIA design which the Working Group calls 
the "Community- Wide, Computer -Assisted Compartmentation Control 
System" (4 G ) . . ... 

2. Discussion 


• A...... T]he recqnqmended 4C systerrr ponsists of a dedicated » .• 

mini-computer containing a central data base of intelligence community 
access approvals. The proposed system would be developed in two 
phases: the first phase provides on-line remote update and retrieval 
capabilities within Washington area headquarters offices only; the 
second phase permits an on-line expansion throughout the United 
States. Once implemented, the systemwould allow participating 
activities direct access to sensitive compartmented information (SCI) 
access approvals for most intelligence community personnel in a 
timely and efficient manner. 
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(1) Benefits from the recommended 4C system as opposed 
to maintaining existing separate systems within the intelligence; 
community include: 

a) Improvement of overall efficiency through 
uniformity of approach for security handling within 
the intelligence community. 

b) Cost advantages result which are unattainable 
using existing individual system to achieve the 4C objective 

• c) Significant reductions in the volume of clearance 
certification message traffic inter - and intra-participating 
organizations. 

d) Continuous rather than limited' incumbent and 
billet access verification by Special Security Officer (SSO) 
facilities. 

e) Elimination of need for permanent certifications 
among participating services and agencies. 

f) Significant time savings for outlying Special 
Security Officer sites supporting major headquarters and 
subordinate elements having high volume in personnel and 
billet access requirements. 

g) Elimination of need to contact multiple sources 
for individual billet access approvals. 

(2) Specifically, the recommended system: ■ 

a) Meets the basic objectives as set forth by the 

Chairman, Security Committee, which are: 

- _1 Permit rapid verification of current (and 

future) SCI access approvals of individuals by any 

intelligence community organization participating 

in the system; 


- 2 - 
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Z Provide access control and accounting 
mechanism for intelligence "bigot" lists and 
"bigoted" programs/projects; 

Eliminate individual SCI access control 
systems within participating organizations. 

b) In pursuance of the above objectives, the recommended 
4C system provides the following capabilities: 

J_ Offers participants an on-line query 
'capability using cathode-ray tube terminals (CRT) 
and remote batch terminals (RBT). 

Z_ Meets the common requirements of all 
member organizations for control and management 
of SCI access, and the DoD SCI billet structure. 

3. Provides a "suppression" capability that 
will conceal, at the option of the inputting organization, 
the access authorizations and/or the existence of an 
individual's record from other participants. 

4 Offers features for controlling the access 
of contractors, foreign personnel and others for 
whom "need to know" or release authority must be 
established prior to each access certification. 

5 - ■ Can be expanded thrbughout the United ' T ; 

States and eventually overseas, if desired. (See 
Attachment, paragraph 1) 

6. Provides an on-line and batch update 
capability from remote locations and a complete 
audit trail to permit trace of all record changes 
to initiating organization. 

1 Offers a record of access queries to the 
system. 


' - 3 - 
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B. A system designed in accordance with the 4C User 
Requirements Design Concept is technically feasible using either a 
large scale computer or a mini-computer. The recommended mini- 
computer system offers more advantages than the large-scale computer 
system (See Attachment, paragraph 2). 

C. Estimated costs of a system are outlined below. Costs 
cited are based on dedicated secure communications lines. Any 
existing secure communication links which can be used will reduce 
implementation costs. Detailed cost estimates for the below described 
mini-computer alternatives were derived from the DIA feasibility 
study. 


Monthly Cost 

Initial Cost Per s /Main ! 


( 1 ) Minimal System 

ITEM 


.. 4 - 
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( 2 ) Washington Area R4C * 

ITEM Initial Cost Monthly Cost 

Pers/Maint 


D. The 4C system is highly cost sensitive to the requirement 
that it be encrypted. The rationale for this requirement is discussc d 
in Attachment, paragraph 3. 

E. Time to fully implement the system within the Washington 
area is estimated to be 1 8 to 30 months from time of USIB approval. 

The longer period considers the normal times required for require- 
ments analysis, system design,, interagency’ Coordination, bid request 
preparation/publication, vendor response preparation, vendor selection 
and contract award, software development/equipment receipt and test, 
and system testing and training. The -shorter estimate assumes extra- 
ordinary measure A can be taken to compress the schedule. " These 
might include: commitment of additional in-house systems analysis 
and design personnel, appointment of agency representatives with 


; *-‘R40 indicates that members of the intelligence community were 
interviewed to determine what equipment each. agency would like to 
have in their terminals to do an adequate job. The exact breakdown 
of e quipment suggested by each member was then priced to arrive at 
the | | fig ure. 


- 5 - 
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plenary acquisition authority, and exped itious provision of necessary 
funding, 1 ~ ~~ " — 

| — rue i eicLliVeLy Long 

period to achieve operational status within only the Washington area 
is a disadvantage that would accompany the development of nearly 
any automated on-line system embracing the requirements of 
multiple organizations and requiring the procurement of hardware, 
particularly the cryptographic devices. 

F. Achievement of the objectives set forth by the Security 
Committee for creation of a community -wide system by linking 
together the existing systems of intelligence community members 
was not considered cost-effective or feasible. A discussion of this 
alternative is in Attachment, paragraph 4. 

G. Savings might be derived through implementation of the 

4C.. System (Attachment, paragraph 5). , V: : 

3. Conclusions 


A. The 4C System proposal satisfies the tasking requirements 
of the Security Committee. 

B. The 4C System would be cost-effective. in consideration 

of an increase in security, savings to be achieved through elimination 
of separate systems, and capability to handle growth rate. 


■ C.^- Tbe. approximate i nitial c o st s of th.e R,4 C Sy stem , with „ 

preferred terminals would be (with a possible variance 

of plus 20% to minus 10%) for implementation within the Washington 
area headquarters sites. Approximately one -half of this amount 
would be devoted to the purchase of desired terminal equipment for 
intelligence community organizations and one -half to equipment 
procurement and software design .for the central facility.. ... 
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ATTACHMENT 


SUPPORTING FACTS AN D OBSERVATIONS 
OF THE WORKING GROUP 


Dedicated Communications Firm Costs 


These costs are not system sensitive within the Washington area 
and may not be so within CONUS. However, at the point of overseas 
expansion of the system they will certainly become so. At that time ' 
the feasibility of linking overseas terminals through then existing 
switching systems should be addressed. 

2. Ar^d^s^ofR^a tiy e_Meu; it s of Large Scale and Mini -Co mputer 
in the Implementation of the 4C System 

A.- Large Scale Computer: 

(1) Advantages 

"a) A one -third part oiT a' large 'scale 'computer’ is " ' 
tentatively available at CIA Headquarters for the 


application. Cost would be appr oximatelvV 


for renta] 

l of peripheral devices. ] 


' f 

/year or 

/ Z 

por 8 years. ) J 




b). CIA software (GIM) and software knowledge 
and expertise would expedite system development by 
an estimated ten months. 


(2) .Disadvantages 

a) Available (GIM) software cannot provide both 
a "suppression" capability and a capability at remote 
terminals for programming of output products. 

, > Spillage 11 of file data possible due to mixing 

of 4C System with other' non-related applications 
possessing their own sets of terminals. 
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c) Backup capability is unknown. It would 
require commitment of additional CIA hardware or 
at least assignment of a precedence to 4C sufficient 
to permit it to displace other applications on other 
hardware. (This requirement represents some as 
yet undefined commitment of additional resources. ) 

d) Expansion potential is uncertain. Other 
systems sharing the computer will compete for 
available capacity as each system expands. Once 
the large scale computer is saturated, there is no 
capability for adding small increments of capacity. 

B. Mini-Computer 
(1) Advantages 

• -A 'A'' • Security maxiipized by nqt mixing file with 

other applications having separate terminals. 

b) Backup capability achieved through use of 
two mini-computers, a dual processor. Both contribute 
to normal operations; however, if one fails the system 
response is degraded, but it does not cease to function. 

: • Under normal conditions one mini -computer (processor) 

v/ould support on-line query operations, and the. other 
would support batch operations. 

c •. ; : .'.V-.V .C a pa city of system can be readily expanded • 
when operations dictate this step by purchase and 
installation of an additional mini-computer and disks. 

d) The administrative problems of competing 
priorities with non-related systems sharing the large 

. A.,- •. scale computer are avoided. 

e) A "suppression" capability is possible 
without the sacrifice of any terminal programming 
capability. 


- 2 - 
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(2) Disadvantages 


a) Grea ter initial outlay of funds required. 

The required for the mini-computer hardware 

at the central site would exceed the rental charges 
associated with the CIA large-scale computer until 
approximately five years of operations. 

b) Software preparation will take more time 
due to the lack of an off-the-shelf or a government- 
owned existing system that will completely fulfill 
system requirement. If the "suppression" capability 

.remains a firm requirement, the time disadvantage 
of the mini-computer disappears as does software 
cost disadvantage (up tof something 

less for large scale). 


C. Conclusion 

(1) Time required to procure any additional peripheral 
equipment needed for the central system, encryption devices, 
and terminal equipment for remote sites would presumably be 
the same as for procurement of the mini-computer hardware; 
i. e. , time for full implementation would not be appreciably 
shorter than for the mini-computer alternative. 

(2) The mini -computer alternative for implementation 
of the 4C concept would produce a superior system, for about 
the same amount of money and time than the large-scale 

...computer alternative would require. .. .'-a . . 

3. Reasons for System Encry ption ' 

Classification of the system at a level of CONFIDENTIAL is 
in accord with current community usage for extensive collections of 
.security, access data. ... ...... .... • ...... 


A. Encryption will prevent undetected, unauthorized 
introduction via line taps of spurious responses to terminal queries 
and will prevent modification of the data base via similar' means. 
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B. It will prevent intercept of batch products; e. g. , large 
access rosters that would aid a hostile spotting and assessment 
effort or DoD SCI billet rosters from which significant order of 
battle information could be derived. 

4 * M odif ication of Ex isting Systems to Attain "Bigot 1 ' List C ontrol 
and Rapid Access Verification Capability 

After examination and discussion with qualified data processing 
systems personnel, this course of action was discarded by the Working 
Group. It would require as much or more effort in software develop- 
ment than would the development of an entirely new system. It would 
take about as long to complete. Major software modifications would 
be required for the systems supporting each agency /department. 

Report and conversion programs would be needed to channel data to 
a central system, presumably a modified CIA SPECLE or SPECLF 11. 
No economies of scale or volume would be achieved in such a "patch 
work" system, ..and if -future modifications became necessary their 
cost could be multiplied by the number of different existing subsystems 
m the network. Such a "system" would suffer from the deficiencies 
that exist within each of the component systems in timeliness of 
input, data accuracy and, to some degree,- information available. 

Time required for full implementation would likely equal that for 
the 4C concept. 

5. Smiimar;_of_Areas^Fr om Which Savings May be Derived Through' 
Implementation of the. 4C Svstem “ 


; ■ iCurrqnt. system operating costs are difficult to specify- since A • , 
most operate on a time- sharing basis using in-house computers. For 
most participants it is reasonable to assume that computer time devoted 
o. security support applications will be, significantly reduced by the 
transfer of operations to the 4C System. Due to the unique require- 
ments of certain participants, they will continue using their existing 

- systems, thus, somewhat reducing the potential for savings. No- 

direct security personnel cost reductions can be predicted. Difficult 
to specify but certain cost savings will be achieved through reduction 
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of access certification message traffic, reduction in the number of 
times which identical information is input to different data bases, 
decreases in time lost due to visitors awaiting access verification, 
and savings in security processing. 
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Remarks : 


1. Attached is a memorandum covering 
the report of the Security Committee's working 
group on the feasibility and cost analysis of a 
Community- Wide, Computer -As sisted Corn- 
par tmentation Control System (4Cs). As you 
recall, USIB agreed to support this study effort 
after the Security Committee recommended 
dropping the CLAIRE concept. 


Z. Because of the complexities of the 
subject matter, an oral and graphic presentation 
to USIB is proposed at the time this item is 
placed on an agenda. If you approve, I ~l 

| will circulate the report for USIB STAT 

consideration. 


APPROVED: 




W. E. Colby 


Date 


i 

25X1 
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